3 ms·
...until they find the ransomware is in the backups too?
by joosters 10y ago
...until they find the ransomware is in the backups too?
- raverbashing 10y agoOnly if they made their "backups" writable as well
- joosters 10y agoIt's difficult to create backups if you can't write into the backups storage.
- gambiting 10y agoThe way I do it is I create backups locally and then copy them to my NAS over ftp(with a password), instead of samba. Hopefully, that way any ransomeware would not be able to encrypt my nas as well, as it does not have any publicly accessible folders on the network.
- joosters 10y agoThe problem is that ransomware doesn't have to activate immediately, so you can end up with multiple copies throughout your backups before it takes effect. Hence, restoring from backups may not solve an infection.
- biot 10y agowrite != overwrite
- drjesusphd 10y agoSo changes to files don't get backed up?
- dagw 10y agoObviously you back up changes, but not to the same place as the old file. Backups should be append only. So that if you at some point you realize you've started to back up encrypted data you can just roll back to the point where the data wasn't encrypted.